credentials/google: introduce a new API NewComputeEngineCredsWithOptions

credentials/google/google.go

@@ -64,14 +64,31 @@ func NewDefaultCredentials() credentials.Bundle {
 //
 // This API is experimental.
 func NewComputeEngineCredentials() credentials.Bundle {
+	return NewComputeEngineCredsWithOptions(PerRPCCredsOpts{})
+}
+
+type PerRPCCredsOpts struct {
+	// The per RPC credentials passed to a bundle
+	PerRPC credentials.PerRPCCredentials
+}
+
+// NewComputeEngineCredsWithPerRPC returns a credentials bundle that is configured to work
+// with google services. This API must only be used when running on GCE.
+//
+// This API is experimental.
+func NewComputeEngineCredsWithOptions(perRPCOpts PerRPCCredsOpts) credentials.Bundle {
+	perRPC := oauth.NewComputeEngine()
+	if perRPCOpts.PerRPC != nil {
+		perRPC = perRPCOpts.PerRPC
+	}
 	c := &creds{
 		newPerRPCCreds: func() credentials.PerRPCCredentials {
-			return oauth.NewComputeEngine()
+			return perRPC
 		},
 	}
 	bundle, err := c.NewWithMode(internal.CredsBundleModeFallback)
 	if err != nil {
-		logger.Warningf("compute engine creds: failed to create new creds: %v", err)
+		logger.Warningf("compute engine creds with per rpc: failed to create new creds: %v", err)
 	}
 	return bundle
 }

credentials/google/google_test.go

@@ -76,8 +76,9 @@ func overrideNewCredsFuncs() func() {
 func TestClientHandshakeBasedOnClusterName(t *testing.T) {
 	defer overrideNewCredsFuncs()()
 	for bundleTyp, tc := range map[string]credentials.Bundle{
-		"defaultCreds": NewDefaultCredentials(),
-		"computeCreds": NewComputeEngineCredentials(),
+		"defaultCreds":       NewDefaultCredentials(),
+		"computeCreds":       NewComputeEngineCredentials(),
+		"computeCredsPerRPC": NewComputeEngineCredsWithOptions(PerRPCCredsOpts{}),
 	} {
 		tests := []struct {
 			name    string